En resumen
- CVE-2020-5497 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.mitre:openid-connect-server, connect (mitreid).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.1%, mayor que el 82.1% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. This is related to header.tag. The issue can be exploited to execute arbitrary JavaScript.
NVD description
The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. This is related to header.tag. The issue can be exploited to execute arbitrary JavaScript.
Más vulnerabilidades de org.mitre:openid-connect-server
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free